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(54) System and method for no ri intrusive monitoring and management of distributed data 
networks 




(57) A centralized supervisory center capable of ad- 
ministrating a plurality of independent client networks 
each comprising at least one server capable of sending 
mail messages through a common communications net- 
work to which the centralized supervisory center and the 
client networks have access, is described. The system 
rests on the assumption that the servers of the client 
networks are capable of collecting, over a fixbd period 
of time, performance data indicative of the operational 
behavior of the client networks and to forward them un- 
der the form of mail messages to the supervisory center. 





Figure 2 



Performance data are processed and displayed over the 
supervisory center monitoring stations and can be ac- 
cessed from the common communications network as 
well. The invention allows the administration of inde- 
pendent remote client networks to take place from a 
central supervisory unit not located within the networks 
themselves so as they can easily be kept safe from any 
unwanted external intrusion preventing private client da- 
ta from being unwillingly accessed from outside thanks 
to a one-way monitoring of the network i.e., only from 
network scheduled or unscheduled self generated mes- 
sages. 
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Description 

Field of the Invention 

[0001] The present invention generally relates to a 
centralized supervisory system, and more particularly to 
a supervisory system for administrating distributed in- 
dependent data networks. 

Background of the Invention 

[0002] In a complete departure from the time where 
enterprise computing resources were centralized in a 
single or a bunch of tightly coupled huge powerful com- 
puters, generally located in a the same place and ac- 
cessed from dumb terminals, computing facilities are 
nowadays largely distributed over a network of individ- 
ual work stations or personal computers and servers, 
generally running on various operating systems while 
having to communicate with each other in order to co- 
operate. While having obvious advantages the new ar- 
chitecture has created its own set of specific problems 
especially, in the administration of a fleet of disparate 
terminal equipments, each having its own processing 
capability. Thus, in an attempt to effectively carry out the 
administration and maintenance of remote equipment, 
organized as a network however, with all the pieces not 
necessarily located on the same site, different central- 
ized supervisory systems have been deployed by enter- 
prises. 

[0003] A conventional centralized supervisory system 
has a hierarchical structure in which a central supervi- 
sory device, located at the nucleus of the system gath- 
ers performance data and trouble reports by polling all 
the pieces of equipment forming the network. Thus, up- 
on request from the central supervisory device, interro- 
gating in turn each individual piece, performance data, 
alarms or trouble reports are gathered. As a matter of 
fact, for large networks, the hierarchy may be comprised 
of several layers of supervisory devices each gathering 
information from the lower situated supervisory devices 
in the hierarchy of such devices. With this approach the 
top supervisory device has a complete view of the net- 
work thus, is able to detect all sorts of troubles and 
alarms, may establish statistics regarding the network 
operation and performance and, generally speaking, is 
capable of collecting enough data and displaying them 
in a convenient way so that the attendant in charge, or 
the piece of software automatically managing the net- 
work: or the combination of, are provided with enough 
pertinent information to take any appropriate action, if 
any is required thus, always keeping the network run- 
ning at its optimal level of performance in an attempt to 
fulfill the generally high level of expectation from the end 
user on the trouble-free running of the network he is con- 
nected to. 

[0004] Although the above objective is generally fairly 
easily achievable in small or medium-size networks, in- 



creasing the number of pieces of equipment in larger 
networks triggers a dramatic increase of the exchange 
of performance data and corresponding polling requests 
which may interfere not only with the normal flow of user 
5 data but also with the alarms and the report of detected 
troubles that should normally not suffer any delay before 
they are conveyed to the central supervisory unit. 
[0005] This latter aspect is. for example, the object of 
the US patent 5,638,514 delivered on June 10, 1997 
10 which teaches how it is possible, in a hierarchy of central 
and regional supervisory devices, to decrease the time 
for which the lines interconnecting the pieces of equip- 
ment are busy transmitting performance data through 
various means especially, including status tables in the 
is supervisory units, having state data keeping track of 
those of the pieces of equipment from which perform- 
ance data need not to be collected and transmitted at 
some point of time. 

[0006] Although this helps reducing the traffic the 
20 whole scheme, consisting in managing a complete en- 
terprise network, implicitly rests firstly on the assump- 
tion that a permanent duplex medium is available from 
transferring, both ways, requests and administrative in- 
formation such as the performance reports and second- 
25 |y assumes that the centralized supervisory unit is in- 
deed at the heart of the network. On these grounds, 
some commercially available products do exist which al- 
low to manage and control an entire network from a sin- 
gle point of administration. As an example, Novell, Inc. 
30 a US company, with headquarters in Provo, Utah and a 
worldwide representation is a well-known player in this 
arena, selling software products aimed at managing het- 
erogeneous networks based on the industry SNMP 
standard (Simple Network Management Protocol). 

35 [0007] However, the assumptions that the centralized 

supervisory unit may actually be located within the net- 
work itself and enjoys a full duplex access to the network 
resources may not hold thus, preventing from being able 
to use commercially available standard solutions as 
40 mentioned above. Actually, because of the relentless 
quest for decreasing the total cost of ownership of a 
computing and communication network, and in order to 
reduce their functional expenses, some companies 
rather than running their own network which assumes 
45 the hiring of a full-time professional team, are subcon- 
tracting the network administration and maintenance to 
a third-party external management service provider. In 
which case the end supervisory unit cannot even con- 
veniently be a part of the company network: mainly for 
50 security reasons, so as company's private information 
is kept confidential and cannot leak outside of the net- 
work. In which case the company's network is sitting be- 
hind a firewall and polling is just no longer possible or 
authorized so as to prevent hacker intrusions. 

[0008] Moreover, when a company is outsourcing its 
network management to a service provider it is very like- 
ly that the external service provider has several, some- 
times many, remote clients it would prefer, in order to 
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reduce in turn expenses- to administrate from the same watched from a monitoring station or from a remote sta- 

central office, from the same consoles, while keeping tion either within the supervisory center or connected to 

each of its client perfectly isolated and unaware of each the common communications network, 

other for obvious ethic, security and commercial rea- [0015] The method of the invention allows the admin- 

sons. 5 istration of a remote client network to take place from a 

[0009] Thus, it is a broad object of the invention to a!- central supervisory unit not necessarily located within 

low the administration of a remote client network to be the client network itself so as it can easily be kept safe 

accomplished from a central supervisory unit not nec- from any unwanted external intrusion preventing private 

essarily located within the network itself. client data from being unwillingly accessed from outside 

[0010] It is a further object of the invention to allow io thanks to a one-way monitoring of the network i.e., only 
keeping client network safe from any unwanted external from network scheduled or unscheduled self generated 

intrusion so as to prevent private client data from being .*■ messages. The method also permits that several inde- 
unwillingly accessed from outside. pendent networks be manageable from the same cen- 

[0011] It is a further object of the invention to permit tral unit while they are kept isolated and unaware of each 

the administration to be carried out through a one-way is other. Furthermore, the invention does not require that 
monitoring of the network i.e., only from network sched- a permanent connection exists with the client networks 
uled or unscheduled self generated messages. provided communications can be established at regular 

[0012] It is another object of the invention to permit intervals, 

that several independent networks be manageable from 

the same central unit while being kept isolated and un- 20 Brief Description of the Drawings 
aware of each other. 

[0013] It is still another object of the invention to per- [0016] 

mit that the above be accomplished without requiring a 

permanent connection with the client networks. Figure 1 is a conceptual view of independent data 

>'*■ 2 s networks administrated from a supervisory 

Summary of the Invention center. 

[0014] A method and system for gathering perform- Figure 2 illustrates in more details the principles on 

ance data in a centralized supervisory center compris- which the centralized supervisory system is 

ing storing, computing and communicating resources, 30 built, 

from a plurality of independent client networks each 

comprising at least one server capable of sending mail Figure 3 shows how client server is organized, 

messages through a common communications network 

on which the centralized supervisory center and the cli- Figure 4 gives more details on the way monitoring 
ent networks are connected, are disclosed. The method 35 station and supervisory center are organ- 

assumes that the servers of the client networks are ca- ized. 

pable of collecting, over a fixed period of time, perform- 
ance data indicative of the operational behavior of the Figure 5 is an example of one possible view of the 

client networks and to preprocess them. Then, at com- data collected by the supervisory center 

pletion of each fixed period of time, the preprocessed 40 from the client networks, 

performance data are formatted under the form of a 

common format report understandable by the supervi- Figure 6 is an overview of the monitor algorithm, 
sory center and forwarded to it, . in one or more mail mes- 
sages, through the common communications network. Detailed Description of the Preferred Embodiment 
Upon reception into the supervisory center they are 

stored while the above steps repeat till supervisory cent- [0017] Figure 1 illustrates the general concept of the 

er and at least one of the client networks are operational. invention where several independent client networks 

Data gathered from the independent client networks are like [1 50] are monitored and administrated from a corn- 

then further processed. Performance data are extracted mon supervisory center [100] through a communica- 

while those of the client networks failing to send the so tions network [110]. The latter being likely the global In- 
common format reports are flagged. Data bases are ere- ternet or an intranet or even more likely a combination 

ated, including a repository data base of all regular per- of. In all cases the assumption is made that the super- 

formance data and a data base of all incidents and out- visory center [1 00] need not to be part of any of the client 

standing events reported from said client networks also, network provided it can communicate with each of them, 

logging those of the client networks that fail sending re- ss Each of the client network is assumed to be a company, 
ports in due time. Hence, data base content are ana- organization, institution or alike private network allowing 

lyzed and various views of the data collected displayed the individuals belonging to these organizations to com* 

so as the operation of the client networks can be closely municate and carry out their job over their own distrib- 
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uted data network. Keeping such a network running at 
a satisfactory level of performance and generally speak- 
ing administrating it require specialized skilled person- 
nel very often not at all in the domain of activity of the 
organization itself. Therefore, many are not willing to 
take care of this and prefer to subcontract it to a third 
specialized party thus, outsourcing their network man- 
agement, in an attempt to reduce the cost of ownership 
of such a network. However, they want at the same time 
to prevent any intrusion from outside for the obvious rea- 
son that, most of the time, the information must stay con- 
fidential and, even more importantly, malicious intrusion 
avoided that could put in jeopardy the network comput- 
ing resources. Then, the hypothetical case like [120] 
where a client would authorize anybody to access its 
network, so that polling of all the network resources 
would be possible from outside is, in practice, never ob- 
served. On contrary, such private network are equipped 
with a "firewall" like [140] which, if it does not generally 
put constraints on the outbound traffic [1 30], is a barrier 
to any direct access within the client network forbidding 
the polling of its computing resources and private data 
bases. Also, a permanent full duplex communication 
line such as [160] may not just exist. If client_3 has no 
need to be permanently connected to the rest of the 
world, due to the nature of its activity, it may decide to 
reduce functional expenses by just connecting when 
needed or at scheduled intervals through a switched line 
instead. As a consequence, the scheme where a third 
specialized party [1 00] is going to monitor and manage 
independent private networks from an outside supervi- 
sory center and be authorized to freely access client net- 
works and enjoy the luxury of a permanent duplex con- 
nection is not a realistic assumption. However, whafls 
reasonable to assume is that at least an electronic mail- 
ing system exists over the private network so that indi- 
viduals within the organization may communicate be- 
tween them and also with outside world even though this 
may not be through a permanent line. Then, mail [170] 
may possibly be issued by any of the machines imple- 
menting a private network towards the supervisory cent- 
er and received from it as well, through the network 
[110], without having to assume that a permanent con- 
nection exists nor that polling is required to monitor the 
client private networks. Finally, it does not matter if the 
client network is simple or complex the scheme only re- 
quires that a gateway for communicating with it, from 
the supervisory center, exists. 

[0018] Figure 2 illustrates in more details the princi- 
ples on which the centralized supervisory system is 
built. It is assumed that each of the client network like 
[200] is made of pieces of equipment such as personal 
computers and individual work stations however all in- 
terconnected, for example through a LAN (Local Area 
Network) [210], so they can communicate and cooper- 
ate to carry out together what the organization is intend- 
ed to achieve. In this network there is at least one server 
[220] in charge of running a groupware type of software 



so that the individuals within the organization can indeed 
perform a team work exchanging mail and documents, 
accessing information from databases or storing it. Also, 
they need to access the external world, let's say, the In- 
5 ternet. All of this and more can be performed from soft- 
ware devised for group of peoples working together 
such as Lotus Notes a product by Lotus Development 
Corporation, a US company with headquarters 55 Cam- 
bridge Parkway, Cambridge, Massachusetts 02142, the 
10 USA and a worldwide presence. With such a product 
the client network server [220] can then be instructed 
and configured to collect and send statistics and reports, 
on a regular basis, to the supervisory center [205] under 
the form of mail messages [250] through a network [240] 
15 which can be public e.g. the Internet, or an intranet or, 
more likely, a combination of. On contrary of the regular 
statistic reports, alarms, incidents and outstanding 
events should be conveyed to the supervisory center at 
the time they occur if a connection is permanently es- 
20 tablished or can be set on request so as the supervisory 
center is made aware and can take the appropriate ac- 
tions. All the mail messages [250], [251] and [252] from 
all the client networks, limited to three clients [200], [201 ] 
and [202] in the particular example of figure 2, are reach- 
25 ing the supervisory center server or group of servers 
[260] where they are processed. It is likely, as illustrated 
in figure 2, that the supervisory center comprises in fact 
several servers for performance reasons if the supervi- 
sory center must manage many client networks and, this 
30 is an even much more important item, to contribute to 
reach a very high level of reliability so that the supervi- 
sory center is able to guarantee a continuous service to 
its clients. Also, the servers have access to significant 
storage facilities [270] in which the various data bases 
35 built to reflect the activity of all the client networks are 
stored. Again, to reach the high level of availability the 
clients are expecting from an outside supervisory center 
replication of data bases is likely to be carried out over 
the various storage facilities and servers accessing 
them. Regardless of the actual implementation two 
broad categories of data bases are going to be man- 
aged. Firstly, a repository [271] type of data base log- 
ging, after processing, all the regular mail messages 
[250], [251] and [252] received from the client networks 
at scheduled intervals, secondly, another one more spe- 
cifically aimed at logging the outstanding, unscheduled, 
events such as the alarms and incidents [272]. The in- 
formation thus collected, processed and stored is con- 
veniently displayed on at least one monitoring station 
[275], interconnected with all the here above servers 
and storage devices over a common network [280] so 
that operators can follow the activity on the client net- 
works and are informed of alarms and incidents. It is im- 
portant noting here that an absence of reporting from a 
client network, at a scheduled interval, is logged too. 
This will eventually generate an alarm if the rules set by 
the supervisory center and agreed by the client, on the 
reporting conditions, are violated. 
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[0019] Although network [280] is symbolized here un- 
der the form of an Ethernet local area network nothing 
prevent from considering any other type of network be 
it local or wide area network. Especially, a product like 
Lotus Notes, already mentioned, allow to access local 
and remote data bases and servers and does not nec- 
essarily assume that the pieces of equipment necessary 
to implement a supervisory center need all to be in phys- 
ical close proximity thus, enabling the possibility of build- 
ing very reliable supervisory centers. Therefore, a su- 
pervisory center like [205] may just be, if convenient, a 
virtual center with storing and computing facilities geo- 
graphically dispersed. However, it can be as well, in part 
or in totality, located in the same locked room with a con- 
trol access policy so as to better protect clients informa- 
tion. 

[0020] The same remark, which does not require that 
all the pieces forming the supervisory center need to be 
in the same place, allows to have a specific remote mon- 
itor-like type of console [290] that can be located in its 
own separate secure place if necessary with however 
still the possibility of accessing the data bases of the 
supervisory center so as to take all the appropriate ac- 
tions for a given client [202], or a bunch of clients, may 
be requiring their own set of private services and possi- 
bly with privileges for accessing their respective net- 
works from outside [295] after permission is granted by 
the respective network managers. 

[0021] In short the supervisory center is a network by 
itself so that the information collected and formatted in 
the monitoring station [275] is view able from the other 
stations on the network or even, if authorized, from a 
remote browser, through Internet, e.g., by a client who 
wants to consult its own performance data. 

[0022] Finally, another type of longer term monitoring 
is achievable from a dedicated monitor machine [230] 
which, from the same data bases [270], can issue daily, 
weekly, monthly etc. .. type of (dashboard) reports. They 
synthesize over the corresponding time period the be- 
havior of the networks so as the respective clients are 
made aware, through the delivery of specific mail re- 
ports [235], of the overall activity on their networks and 
can take corrective actions if there is such a need to do 
so. For example make a timely decision on when to add 
a server if a network constantly bears too much traffic. 
Obviously, this latter type of monitor machine can be as 
well a physically different working station or just another 
virtual machine of a multitask operating system like 
UNIX operated by the same operators in the same en- 
vironment. 

[0023] Figure 3 shows how the client server [300] is 
organized to carry out the scheme of the invention. Serv- 
er is assumed to run a groupware software program 
[310] such as Lotus Notes, already mentioned, and 
more specifically a 'report task* [311] available in this 
type of software. In which case all has been collected 
by the server on the client network activity and stored in 
a local data base 'LOG.NSF' [320] is further analyzed 



by the 'report task' of the groupware program and a re- 
port formatted. This report is assembled in a specific da- 
ta base 'MAI L.BOX' [330] before it is sent under the form 
of one or more mail messages, at next scheduled time, 
s to the supervisory center. Also, outstanding events and 
alarms, detected by the client server [300] may be re- 
ported in the same way, any time, if a permanent con- 
nection to the supervisory center exists or if the connec- 
tion can be established on request. The protocol used 
io for the mail messages is not relevant of the invention. 
Any protocol and product, other than Lotus Notes here 
above mentioned, could be used as well such as those 
based on the well known Simple Network Management 
Protocol (SNMP) of the Internet suite of protocols. 
is [0024] Figure 4 gives more details on how the moni- 
toring station and the supervisory center are organized. 
All the mail messages [400] arriving from the client net- 
works and carrying the scheduled and outstanding (un- 
scheduled) reports are collected and stored in a data 
base 'collect. nsf [410] on the storage facility previously 
described in figure 2 [270] and further processed so as 
they are eventually logged into the 'repository 1 data base 
[420] or into the 'incidents' data base [430] that were 
previously discussed. Moreover, the reporting of alarms 
or the local discovery of anomalies as a result of a deep- 
er analysis of the collected events may trigger the send- 
ing of alerts [440], under the form of mail messages, to 
specific accounts on the remote client networks impact- 
ed. All of this is conven iently displayed [450] on the mon- 
itor station and is discussed in the next figure. Further- 
more, as mentioned earlier, what is displayed from the 
monitoring station can be seen as well from other sta- 
tions part of the supervisory center and even from out- 
side, through the Internet. Obviously, in this latter case, 
data access is controlled and restricted to those that are 
authorized in order they may consult their own data or 
the subset of data they are permitted to browse. 

[0025] Figure 5 is just an example (one view out of 
many) of how the information collected from the client 
networks, reflecting how well they operate, is displayed 
in order that an operator can easily watch it and take 
appropriate actions when needed. In the server name 
column ('Nom du serveur 1 ) [500] appears the client net- 
works sen/iced from the supervisory center. For in- 
stance, IBM-EBS [510], comprising 8 servers [511]. 
Among many other things, the number of observed 
transactions per minutes ('TPM') are listed in column 
[520] for each server [521] and for the whole client net- 
work [522]. In column [530] the data base buffer pool 
(*DBP‘) is reflecting how much, of the available storage 
allocated to the servers, is currently in use. This latter 
parameter is shown in next column [535] and displayed 
in MegaOctets ( (Mo/). As an example, it is then per- 
fectly clear that some of the servers of client network 
'IBM-Paris* [531] have exhausted their storage alloca- 
tion as shown in [532], switching on button [533], to bet- 
ter draw the attention of the operator on a potential prob- 
lem if this situation persists. Column [540] ('Heure Dem- 
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ier Contact) displays the time at which the latest mail 
was received from the servers of the client network thus, 
reflecting when the here above information was last up* 
dated, and column [550] the time, in minutes, that has 
elapsed since. As far as column [560] ('Dernier Demar- s 
rage) is concerned it indicates when, for the last time, 
the servers were restarted. Many other views of the col- 
lected data are available and can be reached for exam- 
ple by clicking on [570] (' Tableaux de Bord) which dis- 
plays the longer term (dashboard) summary reports on to 
the client networks as already discussed in figure 2 or 
on [580] to get the details about the incidents that were 
logged for each client network. 

[0026] Figure 6 illustrates the monitoring algorithm 
with its main steps. The first one or ‘INITMON* [600] in- is 
itializes all the links with the set of data bases previously 
discussed. Also, it sets all the necessary variables for 
the algorithm to operate properly. The second step [61 0] 
collects all the configuration data from the data bases 
such as the server names that supervisory center is due 20 
to control, the expected time interval between the recep- 
tion of two regular mail messages, the name and coor- 
dinates of those in charge of the client networks so that 
alerts [61 5] may be forwarded to them, and so on. From 
this step internal tables are created reflecting the par- 2 s 
ticularities of each client network. The following step 
[620] 'MAJTABLE' is essential since, after initialization 
has been carried out, it retrieves the incoming mail mes- 
sages from the collect database [410] discussed in fig- 
ure 4 so as to update the here above internal tables thus, so 
reflecting the current status of the client networks. After 
which, a next step [630] 'OVERDUE' takes care of those 
of the client networks from which no mail message has 
been received for an outstanding period of time which 
may end up in a 'Contact Loss’ state triggering an alert 35 
towards the client network manager. The step [640] 'MA- 
JETATSRV performs housekeeping of the internal data 
bases and creates, for instance, specific Lotus Notes 
data bases that are view able from all the Lotus Notes 
stations connected on the supervisory center or acces- 40 
sible from outside in part, or in totality, depending on the 
level of authorization those accessing are granted. Ob- 
viously, the same level of functionality may be obtained 
with any other groupware type of software that would 
have characteristics equivalent to Lotus Notes, used as 45 
an example, in the particular implementation of the in- 
vention. Out of the main loop [650] whose steps have 
just been discussed, other tasks need to be effected 
such as 'ENRLOG' [605] which keeps track, into a log 
data file, of the monitoring activity. 'ALERTE' [615], al- so 
ready mentioned, is in charge of forwarding alert mes- 
sages to the administrators of the client networks and 
triggers the generation of any convenient visual or au- 
dible alarm 'BEEP' [635] to draw the attention of the op- 
erators. 'INCIDENT' task [625] is in charge of creating ss 
records in the corresponding data base shown in figure 
2 [272], for the incidents that have been detected. This 
may also enable the alarm [635] while the administrators 



of the client networks are notified [645] oAhe recording 
of such incidents. Finally, the 'CLEANUP' task [655] is 
in charge, in case of error, of restarting the main loop 
[660]. 



Claims 

1. A method for gathering performance data in a cen- 
tralized supervisory center comprising storing, 
computing and communicating resources, from a 
plurality of independent client networks each com- 
prising at least one server capable of sending mail 
messages through a common communications net- 
work on which said centralized supervisory center 
and said client networks are connected, said meth- 
od comprising the steps of: 

in said servers of said client networks; 

collecting, over a fixed period of time, said 
performance data indicative of the opera- 
tional behavior of said client networks; 

preprocessing said performance data 
while they are collected; 

formatting, at completion of said fixed pe- 
riod of time, said preprocessed perform- 
ance data under the form of a common for- 
mat report understandable by said super- 
visory center; 

forwarding, in at least one mail message, 
through said common communications 
network, said report to said supervisory 
center; 

in said supervisory center; 

receiving said mail messages; 

storing said mail messages, for further 
processing, on the storage resources of 
said supervisory center; 

repeating all herein above steps while said super- 
visory center and at least one of said client networks 
are operational. 

2. The method of claim 1 wherein said report is for- 
matted any time, within said fixed period of time, if 
said preprocessed collected performance data are 
reflecting that an outstanding event has been de- 
tected in said client network. 

3. The method of any one of claims 1 or 2 wherein 
some of said client networks are permanently con- 
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nected to said common communications network 
while others, among said client networks, connect 
intermittently, allowing any arrangement of perma- 
nently or intermittently connected client networks. 

4. The method of any one of the preceding claims 
wherein a connection to said common communica- 
tions network from said client network is established 
whenever a report has been formatted so that said 
report is forwarded towards said supervisory center 
when ready. 

5. The method of any one of the preceding claims 
wherein said common communications network is 
a private network or a public network or a combina- 
tion of. 

6. The method of any one of the preceding claims for 
further processing and displaying, in said central- 
ized supervisory center said performance data 
gathered from said plurality of independent client 
networks, said method further comprising the steps 
of: 



er anomalies are detected as a result of further an- 
alyzing, within said supervisory center, content of 
said data bases. 

9. The method of any one of preceding claims further 
including the steps of: 

generating periodically history and activity re- 
ports; sending said history and activity reports to 
said administrators of said client networks. 

10. A system for supervising a plurality of client net- 
works comprising means adapted for ; carrying out 
the steps of the methods according to any one of 
the previous claims. 
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is 



20 



extracting said performance data from said 25 
common format reports received from said cli- 
ent networks; 

flagging those of said client networks failing to 
send said common format reports; 30 

creating data bases from said performance da- 
ta, including: 



a repository data base of all regular per- 35 
formance data; 

a data base of all incidents and outstanding 
events reported from said client networks 
also logging those of said client networks *o 
that fail sending said common formal re- 
ports in due time; 



analyzing said data bases content; 
displaying views of said data bases. 



45 



7. The method of claim 6 wherein said views of said 
data bases are remotely view able from any station 
over said supervisory center or from outside said so 
supervisory center through said common commu- 
nications network provided permission is granted 

by said supervisory center. 

8. The method of any one of preceding claims further ss 
including the step of: 

notifying administrators of said client net- 
works, sending them alert mail messages, whenev- 
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